Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/iC1b0FGZT2XksnAezQzGgi_YOM8.roa
File: iC1b0FGZT2XksnAezQzGgi_YOM8.roa (raw, json)
Hash identifier: 2oJxYMXKV+2rHW3QVPBD+8AOa8Qy5Xuo5dYvfwqrNlk=
Subject key identifier: 88:2D:5B:D0:51:99:4F:65:E4:B2:70:1E:CD:0C:C6:82:2F:D8:38:CF
Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial: 01856D8ADE81F99DB43B2ACB1DFB69E29F4C
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/iC1b0FGZT2XksnAezQzGgi_YOM8.roa
Signing time: Sun 01 Jan 2023 13:34:55 +0000
ROA not before: Sun 01 Jan 2023 13:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1926
IP address blocks: 153.1.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:de:81:f9:9d:b4:3b:2a:cb:1d:fb:69:e2:9f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Validity
Not Before: Jan 1 13:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=882d5bd051994f65e4b2701ecd0cc6822fd838cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:42:7c:19:c0:ce:ae:8d:59:72:5e:c1:3e:
e4:f7:b1:35:89:56:df:26:d6:a8:19:1e:43:19:80:
ea:8d:2d:68:aa:ea:ee:56:35:9f:27:9b:2f:1d:9c:
00:cf:f7:3b:98:01:c8:43:d2:30:91:3e:10:9a:d3:
42:04:9e:71:ab:1e:48:fe:be:5f:2a:08:df:34:25:
0c:74:df:a2:fb:45:c9:39:59:db:6c:43:e1:f8:eb:
27:f4:56:00:7a:a0:4a:a2:68:c7:07:20:7c:18:68:
98:48:61:73:20:dc:49:0d:04:d8:59:76:01:36:bc:
db:87:6b:c5:a5:40:1a:45:37:7d:d7:5b:56:b9:ac:
ee:81:e3:7f:d7:4e:ec:1d:13:0a:01:16:d8:6d:bb:
5b:df:ad:52:bf:7d:2a:f8:4f:51:07:6d:30:e6:a7:
c8:77:18:ab:e2:d3:04:f4:29:07:04:da:12:77:27:
7f:9a:1a:6a:31:ea:93:07:cc:18:12:3c:c1:68:3e:
58:a9:4f:a2:d2:9c:da:e0:a8:95:ae:2f:cb:f1:91:
e2:fe:0e:9e:a3:0c:c7:fe:95:bf:75:9d:2d:31:f8:
7a:18:d7:12:c2:4d:60:7f:60:44:af:99:8b:4e:fd:
f8:92:86:ee:ca:5a:21:a0:a1:cc:fc:fe:13:d8:63:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2D:5B:D0:51:99:4F:65:E4:B2:70:1E:CD:0C:C6:82:2F:D8:38:CF
X509v3 Authority Key Identifier:
keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/iC1b0FGZT2XksnAezQzGgi_YOM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:14:eb:d1:18:ee:83:9d:ac:cf:cc:0f:36:1e:50:81:f3:5e:
f9:b2:11:4e:f6:e3:25:9e:e4:75:09:2c:46:fb:cb:30:2d:0a:
df:bf:4d:dc:e6:08:6e:e0:39:38:de:1b:e5:ee:f7:0f:83:74:
6b:c7:9a:0a:3b:6f:23:17:66:22:7f:e9:8d:74:de:36:1b:ad:
e0:53:a1:32:08:95:5b:dd:c4:f5:d0:24:73:a2:3e:e9:c8:2d:
5b:8d:39:96:da:8d:78:a3:10:a2:46:90:5f:f9:7c:f6:1a:6c:
0f:4d:2c:95:23:68:c8:2f:06:55:17:84:05:91:cb:ef:d0:db:
3a:ad:85:7d:e3:66:97:88:8b:27:99:0e:0f:12:6b:f0:42:c3:
c3:61:80:9a:b7:f7:49:d7:95:09:6a:24:7c:85:d6:8e:b5:b3:
5e:21:68:91:49:c5:53:2d:dd:0e:3d:fb:aa:e3:51:ee:d3:04:
e6:09:54:30:b1:f3:ff:03:e6:1f:8d:9e:70:0c:45:f8:55:56:
36:57:44:cb:61:91:96:f6:d1:90:0f:9c:93:96:87:09:fe:86:
ff:13:90:00:e9:87:01:c4:e5:86:4c:ad:09:d8:41:4b:17:99:
4b:64:31:f8:e9:c3:bf:23:66:1f:30:70:dc:68:eb:7a:02:4a:
3e:06:a9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:04 2024 by rpki-client on console-ams.rpki-client.org